Shadowbyt3$ Claims Data Theft from Syngenta Group’s Cropwise
Summary
A ransomware.live-monitored post attributes an extortion claim against Cropwise (Syngenta Group) to shadowbyt3$. The actor claims it stole 10.4 MB of data and demands payment; the post says the claims are unconfirmed.
Key points
- The post names Cropwise (Syngenta Group) in Switzerland as the claimed victim and shadowbyt3$ as the actor.
- The actor claims unauthorized access to operations[.]cropwise[.]com and accounts[.]cropwise[.]com.
- The post attributes a claim of approximately 10.4 MB of stolen data to the actor, including credentials, farm data, treatment records, and telematics information.
- The actor reportedly demanded payment within 48 hours and threatened to leak data and contact media and affected individuals.
- The post says the claims are based on public statements by shadowbyt3$ and have not been independently confirmed.
Article Details
- Victim
- Cropwise (Syngenta Group)
- Victim Domain
- operations.cropwise.com; accounts.cropwise.com
- Attack Date
- 2026-06-02
- Claim Date
- 2026-06-02
- Encryption Status
- Unknown
- Encrypted Size
- Unknown
- Exfiltration Status
- Claimed by shadowbyt3$; not independently confirmed.
- Exfiltrated Data
- The actor claimed data included user identities and access credentials, precision agronomy and farm metrics, operational treatment records, and telematics and fleet diagnostics data.
- Exfiltrated Size
- Approximately 10.4 MB, according to the actor's claim.
- Ransom Demand
- A demand was issued with a 48-hour response deadline; the amount was not disclosed. Payment was requested in Bitcoin or Monero.
- Leak Status
- The actor threatened to leak the data if the demand was not met; no completed leak is reported.